Open Stack

I run it as 'root'.

>You need to be an admin to run this script.

>On Fri, Aug 08, 2014 at 04:15:17PM -0400, Parisa Heidari wrote:
>> Hi Steve,
>> Thanks for your help. I tried either files but in both cases I get the same
>> error. I copy the output below. It seems that the OS variables are exported
>> properly. Any help is appreciated.
>> Here is the output after executing the suggested script:
>>
>> #./heat-keystone-setup-domain
>> INFO (connectionpool:258) Starting new HTTP connection (1): controller
>> INFO (heat-keystone-setup-domain:71) Creating domain heat
>> INFO (connectionpool:258) Starting new HTTP connection (1): controller
>> Traceback (most recent call last):
>>   File "./heat-keystone-setup-domain", line 112, in <module>
>>     main()
>>   File "./heat-keystone-setup-domain", line 74, in main
>>     description=HEAT_DOMAIN_DESCRIPTION)
>>   File "/usr/lib/python2.7/dist-packages/keystoneclient/utils.py", line 318,
in
>> inner
>>     return func(*args, **kwargs)
>>   File "/usr/lib/python2.7/dist-packages/keystoneclient/v3/domains.py", line
43,
>> in create
>>     **kwargs)
>>   File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 66, in
>> func
>>     return f(*args, **new_kwargs)
>>   File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 314,
in
>> create
>>     self.key)
>>   File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 142,
in
>> _create
>>     return self._post(url, body, response_key, return_raw)
>>   File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 155,
in
>> _post
>>     resp, body = self.client.post(url, body=body)
>>   File "/usr/lib/python2.7/dist-packages/keystoneclient/httpclient.py", line
>> 596, in post
>>     return self._cs_request(url, 'POST', **kwargs)
>>   File "/usr/lib/python2.7/dist-packages/keystoneclient/httpclient.py", line
>> 582, in _cs_request
>>     return self.request(url, method, **kwargs)
>>   File "/usr/lib/python2.7/dist-packages/keystoneclient/httpclient.py", line
>> 564, in request
>>     resp = super(HTTPClient, self).request(url, method, **kwargs)
>>   File "/usr/lib/python2.7/dist-packages/keystoneclient/baseclient.py", line
21,
>> in request
>>     return self.session.request(url, method, **kwargs)
>>   File "/usr/lib/python2.7/dist-packages/keystoneclient/utils.py", line 318,
in
>> inner
>>     return func(*args, **kwargs)
>>   File "/usr/lib/python2.7/dist-packages/keystoneclient/session.py", line
251,
>> in request
>>     raise exceptions.from_response(resp, method, url)
>> keystoneclient.apiclient.exceptions.Forbidden: You are not authorized to
perform
>> the requested action, identity:create_domain. (HTTP 403)
>>
>> Thanks,
>> Parisa
>> >On 06/08/14 14:32, Anne Gentle wrote:
>> >>
>> >>
>> >>
>> >> On Tue, Aug 5, 2014 at 9:13 PM, Steve Baker <sbaker [at] redhat
>> >> <mailto:sbaker [at] redhat>> wrote:
>> >>
>> >> On 06/08/14 09:25, Parisa Heidari wrote:
>> >>> Hi,
>> >>> I am trying Heat - IceHouse but I cannot even create a tiny VM as
explained
>> in
>> >>> the documents
>> >>>
>>
(http://docs.openstack.org/icehouse/install-guide/install/apt/content/heat-verify.html).
>> >>> In Heat-engine log file, I saw that "stack-user-domain" ID is not set in
the
>> >>> heat.conf file. So I modified heat.conf and added admin ID (the one
defined
>> >>> when Keystone was installed and configured) and its name and password for
>> >>> stack_user_domain, stack_domain_admin, and stack_domain_admin_password,
>> >>> respectively. But still stack creation fails and I see in the logs that
>> >>> "ClientException: The server has either erred or is incapable of
performing
>> the
>> >>> requested operation".
>> >>>
>> >>> What should be set in heat.conf as stack-user-domain and other
corresponding
>> >>> variables? should I create a new domain for Heat and how?
>> >>>
>> >>> Many thanks,
>> >>> Parisa
>> >>>
>> >> It looks like you need to run the heat-keystone-setup-domain
>> >> script and copy the resulting snippet into heat.conf
>> >>
>> >>
>> >>
>> >> Hi Steve,
>> >> Should that script be part of the install docs? Currently it just
>> >> says to Create the heat_stack_user role.
>> >>
>> >> I can log a doc bug, just want to be clear what it is that's missing.
>> >>
>> >We do have https://bugs.launchpad.net/heat/+bug/1326483 for the missing
>> man page.
>> >
>> >For the doc bug, the heat installation instructions need to describe
>> >when and how to run heat-keystone-setup-domain[1]
>> >but actually for the icehouse release of heat the script is
>> >create_heat_domain[2]
>>
>> >Having said all that, if the heat domain is not configured there is
>> >fallback code which reverts to the Havana behaviour of requiring the
>> >stack launching user be an admin, and _that_ may be the cause of
>> >Parisa's error above.
>>
>> >[1]
>>
>http://git.openstack.org/cgit/openstack/heat/tree/bin/heat-keystone-setup-domain
>> >[2]
>>
>http://git.openstack.org/cgit/openstack/heat/tree/tools/create_heat_domain?h=stable/icehouse
>>
>>